Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
File: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft (raw, json)
Hash identifier: WETvw2ZygJtZc39KL74KknzatmCxIHpy3w4zAslZxwM=
Subject key identifier: 04:F8:13:76:C0:05:BF:9B:DF:A1:82:07:C9:E0:07:97:A5:7A:49:91
Authority key identifier: B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
Certificate issuer: /CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Certificate serial: 0197B74510C4DF5200803F2E7D5880D2A784
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
Manifest number: 0B10
Signing time: Sat 28 Jun 2025 16:00:46 +0000
Manifest this update: Sat 28 Jun 2025 16:00:46 +0000
Manifest next update: Sun 29 Jun 2025 16:00:46 +0000
Files and hashes: 1: DWyS6ktuYXD1HWtRdim_tw6aAHw.roa (hash: ZpPs8QmClGInLrYdfgabA/tiTnRpT7Agrz+vwk6fAyc=)
2: ebklZqmx0-dRJX-3stcdCCjPSZQ.roa (hash: oxCqtL4IdqqluHjcszErTou8uGJlC2MCnMVsPPzgZCM=)
3: tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl (hash: h1c70MerI4watkAYq+obuuQPS/p6bAsb6X/vE2BHXqo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:10:c4:df:52:00:80:3f:2e:7d:58:80:d2:a7:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b66779f2055b254f5d5b3292eeaf0dd5797737a6
Validity
Not Before: Jun 28 16:00:46 2025 GMT
Not After : Jun 29 16:00:46 2025 GMT
Subject: CN=04f81376c005bf9bdfa18207c9e00797a57a4991
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:e8:d5:b2:75:be:1e:e3:6e:5b:98:c6:00:b2:
f2:4b:01:2c:6f:80:a2:79:2a:3f:e0:ec:73:e8:bb:
a2:4b:34:4d:7c:63:dd:ba:af:b7:9c:b6:3f:b0:11:
0c:2c:df:31:15:e3:89:53:2c:15:00:9c:8a:62:7d:
0d:a7:2d:2f:be:8d:ca:85:68:b4:b9:bc:9c:67:66:
36:68:bb:9d:4d:3c:c2:8b:c3:a3:5c:89:fc:07:73:
b7:31:19:58:1a:b5:6a:5b:9c:c1:e1:b3:36:cc:e5:
56:fb:8c:f9:71:c6:b8:88:78:5e:7b:7a:93:2e:de:
99:09:f6:40:7f:0b:fc:bf:f2:b1:f7:bb:eb:74:64:
33:a7:ef:40:cb:03:d9:13:0f:70:98:46:2f:c7:c9:
45:1c:da:b0:de:ad:ed:94:fe:55:ce:f3:63:a5:2b:
58:c6:1b:b7:ca:ca:80:24:03:90:33:60:37:07:57:
49:6f:19:60:01:82:01:4a:df:37:6f:cf:c0:4b:55:
fd:5e:e4:96:cc:cd:2a:a8:30:eb:cf:72:04:ee:8b:
38:aa:a9:a6:ea:18:42:b4:80:82:74:a7:25:46:1f:
07:ee:d6:bd:09:6f:d5:f8:9c:0c:4c:e2:21:83:39:
37:02:09:4d:d4:95:fa:6b:ca:92:9a:f8:54:01:d1:
d1:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:F8:13:76:C0:05:BF:9B:DF:A1:82:07:C9:E0:07:97:A5:7A:49:91
X509v3 Authority Key Identifier:
keyid:B6:67:79:F2:05:5B:25:4F:5D:5B:32:92:EE:AF:0D:D5:79:77:37:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/1f82e5-3098-453a-af64-cab717a809e7/1/tmd58gVbJU9dWzKS7q8N1Xl3N6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:42:43:0a:f4:e5:75:d2:10:c4:aa:30:d1:54:ab:4e:d7:c4:
3e:8a:13:19:e8:54:8f:28:b8:67:1b:14:b4:06:aa:c7:d8:c1:
07:24:09:49:73:9f:d9:7c:d3:10:f9:48:36:b0:74:08:b0:9e:
7c:ef:bb:f8:b7:c1:c8:2a:36:de:d3:94:a4:15:db:f4:2a:3d:
ab:9d:91:8d:20:6b:00:79:c6:2f:39:e3:4d:b3:39:53:7e:42:
7b:ca:94:0c:a7:f2:70:de:4b:21:f6:d4:f7:62:cb:b4:1a:3b:
99:86:f3:ed:37:e5:3a:35:3a:ed:99:fb:45:e3:0c:24:be:33:
49:75:8f:fc:a8:88:2a:6a:31:c3:38:35:ba:96:0b:3f:7b:46:
66:51:d3:f4:aa:c0:70:60:31:ff:a9:25:4a:54:09:b7:97:20:
91:bc:b9:e6:d4:7a:24:a0:f3:77:49:21:eb:b8:14:32:b6:4f:
ec:f1:8e:29:28:f8:c6:e7:2c:72:b7:7e:f9:7d:dd:21:10:5c:
ba:e6:54:a9:14:39:7a:55:f6:32:c8:60:ba:27:22:b5:22:ee:
fd:00:5e:a2:32:43:47:31:08:ac:9d:24:b5:ba:72:0d:46:46:
53:01:ea:9d:68:64:a2:76:ce:56:57:f9:f7:46:ce:65:e7:24:
6e:47:5e:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 22:26:23 2025 by rpki-client